General
- Target d7220a07ded434aa7c56a2aaa929fc8a61490484c4a8776c52ff1c9c47f05bba
- Size 686KB
- Sample260815-ptwpyswglc
- SHA256 d7220a07ded434aa7c56a2aaa929fc8a61490484c4a8776c52ff1c9c47f05bba
- MD5 27d0c05454c96a74829374c6d577b477
- SHA1 74a287842990276dc4d79404350fb0f1ddc2675c
- SHA512 123e8918859f466e11d26089ca9a2a7664f9adefafb6bc6ebffdc8fe706e46b7c0209b9407a45b7ad28e2f15ba55a50e0d4cf9d39a9069239860496ecd3dc813
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJc:XLl7k/B2mGbUMoJnAhLrc
- TLSH T1E5E4D02C32AD1261E4AE9078E84BB251D67278351732A5EF36E0C57D5B33BE87239F40
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
d7220a07ded434aa7c56a2aaa929fc8a61490484c4a8776c52ff1c9c47f05bba.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target d7220a07ded434aa7c56a2aaa929fc8a61490484c4a8776c52ff1c9c47f05bba
- Size 686KB
- SHA256 d7220a07ded434aa7c56a2aaa929fc8a61490484c4a8776c52ff1c9c47f05bba
- MD5 27d0c05454c96a74829374c6d577b477
- SHA1 74a287842990276dc4d79404350fb0f1ddc2675c
- SHA512 123e8918859f466e11d26089ca9a2a7664f9adefafb6bc6ebffdc8fe706e46b7c0209b9407a45b7ad28e2f15ba55a50e0d4cf9d39a9069239860496ecd3dc813
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJc:XLl7k/B2mGbUMoJnAhLrc
- TLSH T1E5E4D02C32AD1261E4AE9078E84BB251D67278351732A5EF36E0C57D5B33BE87239F40
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE